{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-11T21:09:20.344Z", "record_id": "VXI-EXT-TOOL-TRUST-CLOUDFLARE-01-v1", "record_kind": "external_reference", "title": "Cloudflare API MCP: API reach behind a compact tool list", "system": "Cloudflare API MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does a small Cloudflare MCP tool list imply narrow account permissions?", "near_questions": [ "Does a small tool list mean an agent has little authority?", "Can Cloudflare MCP modify account resources through execute?", "Which account does a Cloudflare API MCP connection use?", "Can a Cloudflare API token restrict an agent's resource access?", "Does Cloudflare MCP support token client IP filtering?", "Why do Cloudflare MCP tool counts differ across sources?", "Is Cloudflare code mode the same as read-only access?", "Where do Cloudflare MCP API results go?", "What should be checked before an infrastructure agent executes an API call?", "Does the Cloudflare server cover only documentation search?", "What does saving a Cloudflare trust record add?", "Does this profile test my Cloudflare token?" ], "supported_claims": [ { "claim": "Cloudflare's API MCP uses search and execute operations to reach a broad API surface. A small visible tool list therefore does not establish narrow authority. Check OAuth grants or API-token permissions and the intended account resources. The docs and repository describe different tool totals; this record preserves that ambiguity rather than using a count as a security claim.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent tool execution or security testing", "Vendor certification, guaranteed safety or no-training assurance" ], "public_summary": "Cloudflare's API MCP uses search and execute operations to reach a broad API surface. A small visible tool list therefore does not establish narrow authority. Check OAuth grants or API-token permissions and the intended account resources. The docs and repository describe different tool totals; this record preserves that ambiguity rather than using a count as a security claim.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-SENTRY-01-v1", "VXI-EXT-TOOL-TRUST-STRIPE-01-v1", "VXI-EXT-TOOL-TRUST-SUPABASE-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Cloudflare managed MCP servers", "source_url": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/", "checked_on": "2026-10-11", "candidate_record_id": "VXI-EXT-TOOL-TRUST-CLOUDFLARE-01-v1", "candidate_record_sha256": "2831a93d4ac68223d7f88c6df25bef9be2bb7ac970f6d6eebfd70584c42f11ed", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Cloudflare's API MCP uses search and execute operations to reach a broad API surface. A small visible tool list therefore does not establish narrow authority. Check OAuth grants or API-token permissions and the intended account resources. The docs and repository describe different tool totals; this record preserves that ambiguity rather than using a count as a security claim.", "required_buyer_context": "Cloudflare API MCP at its published remote endpoint; excludes separate domain-specific Cloudflare servers. Effective account/token grants, current deployed tool inventory, client handling and compatibility of a particular restricted token.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Cloudflare API MCP", "variant": "Cloudflare API MCP at its published remote endpoint; excludes separate domain-specific Cloudflare servers." }, "review_status": "documentation_review_only", "checked_on": "2026-10-11", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, feature entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Cloudflare operates the API MCP service.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Discover Cloudflare API operations and work with account resources.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Account configuration and data reachable through permitted API operations.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Execution can call mutating API operations; effective reach depends on grants and target resources.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth permission selection or user/account API bearer tokens is documented.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Review actual token grants and resource scope. The repository states that API-token client IP filtering is currently unsupported.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "API requests run through the hosted MCP and results return to the client; selected results may enter the client's model workflow.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Using tool count as a permission limit; executing against the wrong account; relying on unsupported token IP filtering.", "source_ids": [ "cloudflare-main", "cloudflare-repo" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Effective account/token grants, current deployed tool inventory, client handling and compatibility of a particular restricted token.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Check account and requested API method before execution; stop when the selected token cannot meet the task's required restrictions.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "cloudflare-main", "url": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/", "final_url": "https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/", "title": "Cloudflare managed MCP servers", "checked_on": "2026-10-11", "sha256": "6a1c5febeeee72317aaf01233c8ba80042c50abe0595699bce71ede7c4c32b0d", "bytes": 136100 }, { "source_id": "cloudflare-repo", "url": "https://github.com/cloudflare/mcp", "final_url": "https://github.com/cloudflare/mcp", "title": "Cloudflare API MCP configuration", "checked_on": "2026-10-11", "sha256": "4e6d85807b286f4b0a2c832e5ab7e951eda1fa4d246922053fb594167812b661", "bytes": 371570 }, { "source_id": "mcp-hints", "url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/", "final_url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/", "title": "MCP tool annotations and enforcement boundaries", "checked_on": "2026-10-11", "sha256": "82888044d831c3bd18f03d87a846ce5d27e028bd67a095edc04ba377fc622163", "bytes": 52715 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Retain the evidence showing why a compact tool interface still requires an account-permission review.", "free": "Complete profile, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Review the effective tool inventory and client data policy before a new integration decision." }, "change_history": [ { "version": 1, "date": "2026-10-11", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#cloudflare-mcp-api-authority-trust", "machine_readable_record": "/varexis-index/records/cloudflare-mcp-api-authority-trust.json" }